Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G0FOrpor_ljvC9A2A9Ui9aZPePw.roa
File: G0FOrpor_ljvC9A2A9Ui9aZPePw.roa (raw, json)
Hash identifier: Q/2cbnXrmiaBR+o6EglRs7jDXVJ6Uu+ViSWMJjLUllM=
Subject key identifier: 1B:41:4E:AE:9A:2B:FE:58:EF:0B:D0:36:03:D5:22:F5:A6:4F:78:FC
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A10CBCB6798FA319C43456B01A85C92452
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G0FOrpor_ljvC9A2A9Ui9aZPePw.roa
Signing time: Mon 05 Oct 2026 15:44:16 +0000
ROA not before: Mon 05 Oct 2026 15:44:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139949
IP address blocks: 200.181.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:bc:b6:79:8f:a3:19:c4:34:56:b0:1a:85:c9:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 5 15:44:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b414eae9a2bfe58ef0bd03603d522f5a64f78fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1e:a6:50:bc:39:8d:b5:26:22:30:93:4d:e5:
83:a8:ad:dc:44:c6:ca:f8:45:87:9f:be:e7:26:16:
89:3b:0d:90:76:30:eb:18:93:02:93:a1:f5:b3:e0:
ea:1b:f3:df:45:c6:5a:ca:29:d7:28:a0:e3:0f:8f:
23:01:a4:37:81:76:41:66:06:7e:74:eb:65:70:cf:
06:44:60:2d:3e:8f:65:ad:85:63:31:74:56:a5:58:
c7:30:01:af:a8:44:e2:06:f3:f0:6c:55:52:d9:91:
1a:cc:b5:14:8f:54:8b:13:ee:3a:d9:3d:1c:31:3b:
c4:e1:eb:10:03:19:ef:82:35:c9:64:ad:28:89:93:
b0:64:c5:78:f9:8f:2b:e1:82:49:05:2d:65:45:51:
1a:d1:8f:1b:5b:ab:a4:0c:ed:7b:5a:3b:21:2c:4f:
e2:ee:0c:f0:47:21:24:5e:46:d5:be:9f:41:79:ee:
0e:ab:7d:d6:9a:d6:0f:81:ed:1e:7b:ca:e4:71:d2:
f1:79:44:6a:e9:0f:d5:db:cb:dc:d1:37:4d:b5:17:
ac:6e:eb:ee:10:62:30:d7:52:ea:66:c7:e6:5b:87:
19:9e:54:d6:9b:c4:52:e6:ce:b6:fd:4b:43:25:53:
7a:79:79:93:90:08:f4:5e:f9:37:95:21:98:8e:e6:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:4E:AE:9A:2B:FE:58:EF:0B:D0:36:03:D5:22:F5:A6:4F:78:FC
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/G0FOrpor_ljvC9A2A9Ui9aZPePw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.181.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:77:f2:89:90:a4:c5:ec:30:33:a4:01:be:b0:95:4b:a7:31:
9b:7a:4a:3d:bf:66:c7:fa:67:57:76:87:64:c7:36:bd:52:7e:
91:25:da:f0:b0:9f:43:06:5f:52:95:87:5e:0d:b3:5a:d0:69:
c8:cd:f5:19:a3:df:35:37:9c:be:24:34:fc:42:0d:42:f9:dc:
ad:cb:84:17:90:a1:60:f7:77:9d:af:6e:a6:c1:02:e5:3d:b4:
ad:11:df:d3:2a:53:67:f3:9b:55:89:37:c7:15:a3:b7:2a:4a:
cb:b2:e2:80:b4:73:da:c6:98:80:18:56:aa:64:74:26:b3:61:
38:1e:8d:3b:13:2c:0c:38:05:1d:78:7e:8a:99:81:3d:d1:04:
f2:4b:dd:cb:60:f4:b0:5b:3e:8d:b2:b4:81:c3:c5:70:ce:71:
39:a1:62:ad:fd:b8:d7:a1:fa:12:14:c0:d2:01:20:f2:c6:ac:
b2:95:1a:29:6b:a7:be:56:1f:d0:4c:f1:6f:fb:9d:a2:cc:94:
f6:19:4c:8c:8f:bc:27:80:54:d1:38:dc:34:93:94:3a:a7:0a:
f7:91:d7:50:79:55:77:c1:3b:a9:8a:b8:09:08:4d:1b:7c:66:
bc:7e:94:ae:31:4e:a8:55:85:2b:07:ed:99:3f:e7:52:ee:7e:
df:8d:3c:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEMvLZ5j6MZxDRWsBqFySRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYxMDA1MTU0NDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjQxNGVhZTlhMmJmZTU4ZWYwYmQwMzYwM2Q1MjJmNWE2NGY3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h6mULw5jbUmIjCTTeWDqK3cRMbK
+EWHn77nJhaJOw2QdjDrGJMCk6H1s+DqG/PfRcZayinXKKDjD48jAaQ3gXZBZgZ+
dOtlcM8GRGAtPo9lrYVjMXRWpVjHMAGvqETiBvPwbFVS2ZEazLUUj1SLE+462T0c
MTvE4esQAxnvgjXJZK0oiZOwZMV4+Y8r4YJJBS1lRVEa0Y8bW6ukDO17WjshLE/i
7gzwRyEkXkbVvp9Bee4Oq33WmtYPge0ee8rkcdLxeURq6Q/V28vc0TdNtResbuvu
EGIw11LqZsfmW4cZnlTWm8RS5s62/UtDJVN6eXmTkAj0Xvk3lSGYjubEvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtBTq6aK/5Y7wvQNgPVIvWmT3j8MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvRzBGT3Jwb3JfbGp2QzlBMkE5VWk5YVpQZVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyLVQMA0G
CSqGSIb3DQEBCwUAA4IBAQBqd/KJkKTF7DAzpAG+sJVLpzGbeko9v2bH+mdXdodk
xza9Un6RJdrwsJ9DBl9SlYdeDbNa0GnIzfUZo981N5y+JDT8Qg1C+dyty4QXkKFg
93edr26mwQLlPbStEd/TKlNn85tViTfHFaO3KkrLsuKAtHPaxpiAGFaqZHQms2E4
Ho07EywMOAUdeH6KmYE90QTyS93LYPSwWz6NsrSBw8VwznE5oWKt/bjXofoSFMDS
ASDyxqyylRopa6e+Vh/QTPFv+52izJT2GUyMj7wngFTRONw0k5Q6pwr3kddQeVV3
wTupirgJCE0bfGa8fpSuMU6oVYUrB+2ZP+dS7n7fjTxB
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:08 2026 by rpki-client